Is there a way to have the user email me information applicable
to the project, and I go through a series of windows that creates
the certificate for them, and make the importation of the certificate
as painless as possible.
Yes, you can save pain for them, but it would create pain for you.
Basically, write a program that installs certificates directly into
their cert7.db file using dbm-1.85 calls (see tag-gidcert.c for how to
do this). Then put Javascript on your cert issuing page that
downloads the certificate and the installation program into a file and
runs the installation program. Or else, re-implement enough of
dbm-1.85 in Javascript (or Java, or a Netscape plugin) to do the
installation without using an external program. You will have to
enable security privileges to be able to write files, run external
programs, and so forth from Javascript, which means the user will
still have to click "grant" in a security dialog, or you will have
to give yourself that permission in a signed.db file which you'll
create when you set up their browser (if you set up the browsers).
Hmmm, if you set up the browsers, you could pre-configure it with
a plug-in that installs the certs. Anyway, this is all a big pain
and takes a fair amount of Netscape-specific grovelling.
With IE, it's even worse.
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
